Cyber Crisis and Technology Manager

Role

Description:

Engineer resilience and recoverability against cyber-attack into the design, implementation, operation and management of the systems that support AMP’s essential functions. You will define business resilience requirements as measurable recovery objectives (RTO/RPO) and design, implement and operate the technology controls that back up, replicate and recover information and services in line with those requirements. This includes owning backup and immutable/isolated recovery architectures, failover and failback processes, and leading data restoration exercises, including routine backups and the ongoing maintenance, integrity checking and restore testing of existing backups, so that data and critical services remain protected, verifiable and rapidly recoverable following ransomware, corruption or infrastructure loss.

You will work closely with the IT team to align disaster recovery to the broader operational resilience frameworks and assess, develop, and deliver innovative cyber resilient solutions to protect AMPs critical business activities.

• Demonstrate commitment to the AMP core values through upholding our standards of business conduct, complying with business policies & procedures, and leading by example.
• Establish a working environment which promotes the importance of employees acting with integrity and in an ethical manner in line with the Code of Conduct
• Build and embed AMP’s ability to prevent, respond to and recover from operational risks and their impacts through the development and delivery of a comprehensive Technology Resilience strategy, aligned with the organization’s strategic objectives and regulatory requirements
• Be the subject matter expert, becoming a trusted partner to the business, keeping up to date with latest developments and innovation in this field
• Define, document, update and disseminate an IT Disaster Recovery (DR) plan(s) by developing technical recovery plans for business-critical services (including applications and infrastructure) for executing required technology and infrastructure recovery processes, including Operational Technology after a disruption, compromise, or failure.
• Test established IT DR plan(s), including tests of recovery point objectives against cyber scenarios to verify operational effectiveness and the readiness to execute the plan(s)
• Test the operational effectiveness of defined DR plans through checklists, walk-throughs, tabletop exercises, simulations (parallel or full interrupt), and comprehensive exercises in coordination with related plans (e.g. IT DR plans and crisis management plans)
• Incorporate cybersecurity scenarios, the review of test outcomes, implementation of the lessons learned and required improvements/corrective actions into IT DR and Cyber Resilience plans
• Review DR plan test results and implement required corrective actions, if needed, leading a Technology Resilience board and making recommendations for remedial actions
• Provide oversight on the execution of AMP’s disaster recovery plan in the event of a disaster and enable AMP to respond quickly to a loss of capability through cyber attack, damage to infrastructure or any other cause
• Review and test the disaster recovery plan to ensure critical IT services can be restored during a crisis
• Oversee the implementation of the annual training testing plan for the Disaster Recovery capability to ensure it remains fit for purpose and can be managed
• Provide development and oversight to AMP’s Disaster Recovery function ensuring governance alignment with the resilience framework, with a focus on ITs response and recovery capabilities
• Oversee the delivery of Disaster Recovery controls across IT, operations and the wider business
• Ensure the development of…